nerdexam
Microsoft

AZ-101 · Question #27

You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network named VNet1. You need to ensure that you can configure a point-to-site connection…

The correct answer is E. Delete GW1. F. Create a route-based virtual network gateway. E: Policy-based VPN devices use the combinations of prefixes from both networks to define how traffic is encrypted/decrypted through IPsec tunnels. It is typically built on firewall devices that perform packet filtering. IPsec tunnel encryption and decryption are added to the…

Implement advanced virtual networking

Question

You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network named VNet1. You need to ensure that you can configure a point-to-site connection from VNet1 to an on- premises computer. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

  • AReset GW1.
  • BAdd a service endpoint to VNet1.
  • CAdd a connection to GW1.
  • DAdd a public IP address space to VNet1.
  • EDelete GW1.
  • FCreate a route-based virtual network gateway.

How the community answered

(21 responses)
  • A
    5% (1)
  • C
    5% (1)
  • D
    14% (3)
  • E
    76% (16)

Explanation

E: Policy-based VPN devices use the combinations of prefixes from both networks to define how traffic is encrypted/decrypted through IPsec tunnels. It is typically built on firewall devices that perform packet filtering. IPsec tunnel encryption and decryption are added to the packet filtering and processing engine. F: A VPN gateway is used when creating a VPN connection to your on-premises network. Route-based VPN devices use any-to-any (wildcard) traffic selectors, and let routing/forwarding tables direct traffic to different IPsec tunnels. It is typically built on router platforms where each IPsec tunnel is modeled as a network interface or VTI (virtual tunnel interface). Incorrect Answers: D: Point-to-Site connections do not require a VPN device or a public-facing IP address. https://docs.microsoft.com/en-us/azure/vpn-gateway/create-routebased-vpn-gateway-portal https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-multiple-policybased-

Topics

#point-to-site VPN#policy-based gateway#route-based gateway#VPN gateway

Community Discussion

No community discussion yet for this question.

Full AZ-101 Practice